Poznaj podatności. Chroń swoje aplikacje.
Dowiedz się, które luki zagrażają Twoim technologiom i jak je usunąć. Znajdziesz tu opisy zagrożeń, podatne wersje i konkretne zalecenia - od CMS-ów i wtyczek po biblioteki aplikacji.
Archiwum podatności 71 602
Klaviyo <= 3.0.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
WooCommerce Weight Based Shipping <= 5.4.1 - Cross-Site Request Forgery leading to Plugin Settings Changes
Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Data Tables Generator by Supsystic <= 1.10.25 - Missing Authorization
Kopa Framework <= 1.3.5 - Cross-Site Request Forgery
Shopping Cart & eCommerce Store <= 5.4.2 - Authenticated (Admin+) Local File Inclusion via import_file_url
CMS Press <= 0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
PhonePe Payment Solutions <= 1.0.15 - Authenticated (Subscriber+) Server-Side Request Forgery
User Role by BestWebSoft <= 1.6.6 - Cross-Site Request Forgery to Privilege Escalation
Regina Lite <= 2.0.7 - Reflected Cross-Site Scripting
Dynamics 365 Integration <= 1.3.12 - Cross-Site Request Forgery via wp_ajax_wpcrm_log
WP Google Map Plugin <= 4.4.2 - Cross-Site Request Forgery via delete()
Reusable Blocks Extended <= 0.9 - Cross-Site Request Forgery via reblex_reusable_screen_block_pattern_registration
Robo Gallery <= 3.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Solidres <= 0.9.4 - Reflected Cross-Site Scripting
Exxp <= 2.6.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute
Intrepidity <= 1.5.1 - Cross-Site Request Forgery via mytheme_add_admin
Blind SQL injection vulnerability in Jms Theme Layout (jmsthemelayout) PrestaShop module
Unrestricted upload vulnerability in Jms Slider (jmsslider) PrestaShop module
Blind SQL injection vulnerability in Jms Page Builder (jmspagebuilder) PrestaShop module
Blind SQL injection vulnerability in Jms Vertical MegaMenu (jmsvermegamenu) PrestaShop module
Dowiedz się, które podatności dotyczą Twojej aplikacji
Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.